Privacy Policy
This is a product draft, not legal advice. A lawyer should review it before a public launch. Last updated 16 October 2026.
Draft, not legal advice.
1. Who this covers
Merchant accounts, their staff, and buyers who check out or message a store on SellFlow.
2. Data we process
Name, email, and password hash; store settings; catalogues; customer details the merchant collects, including WhatsApp numbers; order and payment metadata from Korapay; encrypted ads tokens; and logs needed to run the service.
3. Why
Checkout, messaging, analytics, support, fraud prevention, and operating the platform. SellFlow does not sell personal data.
4. Processors
Database hosting, Redis, Korapay, Meta for WhatsApp and ads, other ad networks the merchant connects, OpenAI when AI is enabled, and Resend for account email.
5. Retention and security
Data stays while the account is active and as long as ledgers and law require. Access is limited by role, passwords are hashed, and sensitive tokens are encrypted at rest where that is implemented.
6. Rights
Merchants can ask for access or deletion, except where payment records must be kept. Buyers should contact the store for order questions. Platform issues go to support@sellflow.ng. The Nigeria Data Protection Act is the frame for these requests. This draft does not claim a regulator filing.
7. Google user data
SellFlow requests Google Ads permission when a Super Admin connects Google. Those tokens are stored encrypted. SellFlow uses them only to manage campaigns in SellFlow's own ads account. SellFlow does not sell Google user data or use it for any other purpose.
8. Contact
Privacy questions: support@sellflow.ng. Read the Terms of Service.